3 ms·
How does this compare to https://haveibeenpwned.com/Passwords https://haveibeenpwned.com/Passwords ?
by bradknowles 8y ago
How does this compare to https://haveibeenpwned.com/Passwords https://haveibeenpwned.com/Passwords ?
- vichu 8y agoIt does seem very similar to the implementation of HIBP's Pwned Passwords by Junade Ali[0]. I haven't delved into the nitty gritty details/differences between the two, but they do seem to use similar techniques to guarantee k-anonymity. A key difference, at a glance, is the inclusion of usernames to be paired with the leaked passwords. [0] Junade Ali's write-up https://blog.cloudflare.com/validating-leaked-passwords-with-k-anonymity/ https://blog.cloudflare.com/validating-leaked-passwords-with...